$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json) Hash identifier: JH7D4dm4GAeP1cgOvBcwTZ4xH/e5FsWbCa28YltVGNk= Subject key identifier: 1F:DF:86:27:A7:B9:D2:7E:32:48:1B:11:DB:C4:16:4E:06:B9:67:CA Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Certificate serial: 0876 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft Manifest number: 0859 Signing time: Sat 04 Apr 2026 20:42:29 +0000 Manifest this update: Sat 04 Apr 2026 20:42:28 +0000 Manifest next update: Sat 11 Apr 2026 20:42:28 +0000 Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: FLJY8oyeloTnEjm3rS2NqQg7CTkAfo+t1avOyxLM6rQ=) 2: 0ED6FD58E4AC11F09CFF02084D6F56BC.roa (hash: c00S8PMH6seb894IcBTA4+jGD8At/7O3wWr5RItqF8c=) 3: D5775FF4E54F11F0875E48B9366F56BC.roa (hash: dBaY0JbbVzl8W6CAtYQ8b8Su4AnGzP3sLeHSsKnDsdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2166 (0x876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Validity Not Before: Apr 4 20:42:28 2026 GMT Not After : Apr 11 20:42:28 2026 GMT Subject: CN=69d177b5-d270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:47:92:b0:bc:9f:87:c3:ee:0a:84:e1:6b: 91:5f:50:d5:08:cf:5b:25:98:5f:e1:67:f4:a9:2c: 48:6d:47:55:2d:e5:76:5e:f1:f3:c5:9b:a6:bb:18: 99:4a:ba:17:3a:59:53:f2:09:40:ad:04:0a:50:c5: f6:82:76:75:6f:0b:8f:56:7c:9c:67:1e:9f:e0:ff: 05:68:ad:ce:0d:b7:ba:c7:81:17:4a:8b:f3:3e:f3: 65:54:2a:24:1a:99:c6:96:fb:bc:0e:d5:ed:66:8a: eb:37:cb:8d:2d:68:23:60:87:45:22:07:51:3d:98: f8:1d:08:0a:8c:16:ca:cb:59:d2:df:ad:ec:1a:b6: cc:3b:b1:2c:c9:89:41:de:31:b6:7a:1f:b3:6b:93: d1:9a:c9:65:18:77:7d:f9:f3:1e:4c:6a:e0:3c:e0: 96:0f:7d:a5:bd:f3:7c:50:15:5d:2f:8b:c4:b6:49: 88:eb:5b:cf:0c:49:93:33:1f:95:98:0b:8f:c0:9a: 8c:4a:5e:d1:95:02:d8:ac:b4:01:89:d1:bf:3d:7a: c9:9c:d2:dc:39:79:de:fe:be:ae:f2:1e:dc:4b:cb: 88:f9:38:2f:51:5e:b0:13:a8:38:8c:c5:a2:f8:26: 3e:a6:b7:9e:91:a7:1e:54:aa:10:09:06:c6:42:3c: 0c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DF:86:27:A7:B9:D2:7E:32:48:1B:11:DB:C4:16:4E:06:B9:67:CA X509v3 Authority Key Identifier: keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:8f:bb:43:61:3b:c1:58:fb:79:83:44:f1:6b:f0:f4:9d:3f: 91:40:21:52:92:e9:3e:ce:a3:9d:9a:2c:07:12:1f:2f:4f:a3: 4d:61:c9:01:1d:a7:37:40:fd:e3:08:8a:4b:2f:8e:d0:05:dc: d0:be:a7:22:05:4a:46:52:01:17:11:68:82:6d:c3:7a:07:a4: bf:41:8d:a9:eb:ba:5c:23:7f:2c:52:4c:ce:9c:71:14:89:62: 69:55:17:70:af:8a:53:94:c5:cb:e4:6c:2d:f1:8d:ea:27:6c: b3:ce:84:8b:fc:81:58:ac:a1:d0:b4:25:af:a3:38:24:fb:02: cf:6e:71:5e:7b:e1:e7:b0:9c:53:63:bc:e9:08:93:3e:cd:e7: 2f:22:25:a2:56:fa:4d:98:02:d4:11:f0:ec:c0:20:0f:37:b8: 29:26:cc:f6:77:35:68:f5:3c:85:5e:7b:c5:c5:7f:8a:c1:66: b7:91:17:bb:96:3b:46:5f:b4:24:10:d0:10:42:6f:a8:45:9e: f9:06:d9:84:75:65:c8:49:39:47:7a:f5:71:ca:94:e5:d7:84: 75:fb:83:67:df:22:b9:3a:cc:6a:13:bb:b6:c4:39:1f:0e:f2: ff:67:fb:93:bd:cc:a3:73:0e:d7:fb:7e:ee:fa:8e:a3:5e:5c: 99:7f:47:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURENjdBRkIxQjgy Mzg4RTVFQjEwHhcNMjYwNDA0MjA0MjI4WhcNMjYwNDExMjA0MjI4WjAYMRYwFAYD VQQDEw02OWQxNzdiNS1kMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppFHkrC8n4fD7gqE4WuRX1DVCM9bJZhf4Wf0qSxIbUdVLeV2XvHzxZumuxiZ SroXOllT8glArQQKUMX2gnZ1bwuPVnycZx6f4P8FaK3ODbe6x4EXSovzPvNlVCok GpnGlvu8DtXtZorrN8uNLWgjYIdFIgdRPZj4HQgKjBbKy1nS363sGrbMO7EsyYlB 3jG2eh+za5PRmsllGHd9+fMeTGrgPOCWD32lvfN8UBVdL4vEtkmI61vPDEmTMx+V mAuPwJqMSl7RlQLYrLQBidG/PXrJnNLcOXne/r6u8h7cS8uI+TgvUV6wE6g4jMWi +CY+preekaceVKoQCQbGQjwMLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/fhien udJ+MkgbEdvEFk4GuWfKMB8GA1UdIwQYMBaAFGh76yd6BZ3v6ivt1nr7G4I4jl6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZBRC9BNEQ3ODk5RTA4 NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5lX3FLLTNXZXZzYmdqaU9Y ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIdnJKM29GbmVfcUstM1dldnNiZ2ppT1hyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUZBRC9BNEQ3ODk5RTA4NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5l X3FLLTNXZXZzYmdqaU9YckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAI+7Q2E7wVj7eYNE8Wvw9J0/kUAhUpLpPs6jnZosBxIfL0+jTWHJAR2nN0D9 4wiKSy+O0AXc0L6nIgVKRlIBFxFogm3Degekv0GNqeu6XCN/LFJMzpxxFIliaVUX cK+KU5TFy+RsLfGN6idss86Ei/yBWKyh0LQlr6M4JPsCz25xXnvh57CcU2O86QiT Ps3nLyIlolb6TZgC1BHw7MAgDze4KSbM9nc1aPU8hV57xcV/isFmt5EXu5Y7Rl+0 JBDQEEJvqEWe+QbZhHVlyEk5R3r1ccqU5deEdfuDZ98iuTrMahO7tsQ5Hw7y/2f7 k73Mo3MO1/t+7vqOo15cmX9HyQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:29 2026 by rpki-client